iis - Is there a difference between "Etc/UTC" and "UTC" in logstash? -
im parsing w3c iis logs , i'm using found in this article starter.
but part of logstash config im unsure of:
## set event timesteamp log # date { match => [ "log_timestamp", "yyyy-mm-dd hh:mm:ss" ] timezone => "etc/utc" }
log_timestamp comes from: match => ["message", "%{timestamp_iso8601:log_timestamp}.....
my question why using "etc/utc" , not "utc"? example find online of logstash config using "etc/utc".
is necessary because of iis? happen if did utc? should identical (etc/utc "long" name) want confirm.
the supported timezones date
filter listed here:
http://joda-time.sourceforge.net/timezones.html
etc/utc
1 of allowed timezones universal time coordinated. utc
allowed value. they're synonyms.
Comments
Post a Comment